Integer overflow

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

Heap overflow

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image...

Heap overflow

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font...

Buffer overflow

Buffer overflow in International Components for Unicode ICU in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service application crash via vectors involving uppercase strings...

Path traversal

Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root directory as the starting point of a recursive listing...

Memory corruption

QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Microsoft Office document...

Buffer overflow

Off-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service application crash via a CFString object that triggers a buffer overflow...

Heap overflow

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image...

Buffer overflow

Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG file...

Out-of-bounds

AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service out-of-bounds read and reboot via Wi-Fi frames on the local wireless network...

CVE-2011-0213

Apple QuickTime contains multiple CVEs including CVE-2011-0213. The issue is a buffer overflow in QuickTime’s JPEG handling that can cause application termination or arbitrary code execution when processing a crafted JPEG, with impact on Mac OS X and Windows. For Mac OS X, Apple states the issue ...

CVE-2011-0208

CVE-2011-0208 affects Mac OS X 10.6 QuickLook: memory corruption in QuickLook when handling Microsoft Office documents could let a remote attacker cause arbitrary code execution or an application crash by providing a specially crafted Office file. The issue was addressed in the Mac OS X 10.6.8 up...

CVE-2011-0209

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted RIFF WAV file...

CVE-2011-0202

Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded Type 1 font in a PDF document...

CVE-2011-0210

QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted sample tables in a movie file...

CVE-2011-0196

CVE-2011-0196 affects AirPort in Mac OS X 10.5.8, where handling Wi‑Fi frames can trigger an out-of-bounds read on a local wireless network, enabling remote denial of service and system reset. Public docs in the connected set indicate this vulnerability stems from out-of-bounds memory read in Wi‑...

CVE-2011-0205

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image...

CVE-2011-1132

CVE-2011-1132 affects Apple Mac OS X kernels prior to 10.6.8. The vulnerability is a NULL pointer dereference in the IPv6 socket options handling, which a local user can trigger to cause a system reset (kernel panic) via crafted socket option vectors. The issue resides in the kernel’s IPv6 implem...

CVE-2011-0211

CVE-2011-0211: Integer overflow in QuickTime’s handling of audio channels in QuickTime movie files on Mac OS X before 10.6.8. This can allow remote code execution or an application crash via a crafted movie file. Affected: Mac OS X versions prior to 10.6.8. Mitigation: update to Mac OS X 10.6.8 o...

CVE-2011-0198

CVE-2011-0198: Heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X before 10.6.8. A remote attacker could exploit a crafted embedded TrueType font to execute arbitrary code. Affected product: Mac OS X (pre-10.6.8). Impact: remote code execution with partial confidentiality/integri...